<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-1x.git/interface-definitions/include/pki, branch current</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
</subtitle>
<id>https://git.amelek.net/vyos/vyos-1x.git/atom?h=current</id>
<link rel='self' href='https://git.amelek.net/vyos/vyos-1x.git/atom?h=current'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/'/>
<updated>2024-02-23T12:14:54+00:00</updated>
<entry>
<title>pki: T3642: Fix typo in PKI includes</title>
<updated>2024-02-23T12:14:54+00:00</updated>
<author>
<name>sarthurdev</name>
<email>965089+sarthurdev@users.noreply.github.com</email>
</author>
<published>2024-02-23T12:14:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=e2adfdef9e79aa7550e82a12d661718a479aba90'/>
<id>urn:sha1:e2adfdef9e79aa7550e82a12d661718a479aba90</id>
<content type='text'>
</content>
</entry>
<entry>
<title>pki: T6034: add OpenSSH key support</title>
<updated>2024-02-11T20:49:25+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2024-02-11T20:49:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=8c78ef0879f22ffd4a5f7fdb175e9109b46e9d7b'/>
<id>urn:sha1:8c78ef0879f22ffd4a5f7fdb175e9109b46e9d7b</id>
<content type='text'>
set pki openssh rpki private key ...
set pki openssh rpki public key ...
set pki openssh rpki public type 'ssh-rsa'
</content>
</entry>
<entry>
<title>xml: T5738: improve PKI building blocks for CLI</title>
<updated>2024-02-10T11:07:55+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2024-02-10T11:07:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=d4278cde2b153e163fe41e1bc461891397336bc3'/>
<id>urn:sha1:d4278cde2b153e163fe41e1bc461891397336bc3</id>
<content type='text'>
</content>
</entry>
<entry>
<title>https: T5902: remove virtual-host configuration</title>
<updated>2024-01-09T06:29:16+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2024-01-06T09:55:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=d0d3071e99eb65edb888c26ef2fdc9e038438887'/>
<id>urn:sha1:d0d3071e99eb65edb888c26ef2fdc9e038438887</id>
<content type='text'>
We have not seen the adoption of the https virtual-host CLI option.

What it did?
* Create multiple webservers each listening on a different IP/port
  (but in the same VRF)
* All webservers shared one common document root
* All webservers shared the same SSL certificates
* All webservers could have had individual allow-client configurations
* API could be enabled for a particular virtual-host but was always enabled on
  the default host

This configuration tried to provide a full webserver via the CLI but VyOS is a
router and the Webserver is there for an API or to serve files for a local-ui.

Changes

Remove support for virtual-hosts as it's an incomplete and thus mostly useless
"thing". Migrate all allow-client statements to one top-level allow statement.
</content>
</entry>
<entry>
<title>T5798: load-balancing revese-proxy add multiple SSL certificates</title>
<updated>2023-12-08T14:14:07+00:00</updated>
<author>
<name>Viacheslav Hletenko</name>
<email>v.gletenko@vyos.io</email>
</author>
<published>2023-12-08T14:14:07+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=fe99c45e05fd5794905145ddca80e6078145c2e8'/>
<id>urn:sha1:fe99c45e05fd5794905145ddca80e6078145c2e8</id>
<content type='text'>
Add ability to configure multiple SSL certificates for
frontend/service

set load-balancing reverse-proxy service web mode http
set load-balancing reverse-proxy service web port 443
set load-balancing reverse-proxy service web ssl certificate cert1
set load-balancing reverse-proxy service web ssl certificate cert2
</content>
</entry>
<entry>
<title>openvpn: T4485: Accept multiple `tls ca-certificate` values</title>
<updated>2022-06-28T23:37:59+00:00</updated>
<author>
<name>sarthurdev</name>
<email>965089+sarthurdev@users.noreply.github.com</email>
</author>
<published>2022-06-25T21:04:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=0d5ac59894ae7c10bd9d69047fa7098de66f835f'/>
<id>urn:sha1:0d5ac59894ae7c10bd9d69047fa7098de66f835f</id>
<content type='text'>
</content>
</entry>
<entry>
<title>pki: xml: T3642: use "txt" as format identifier</title>
<updated>2021-09-06T10:02:06+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2021-09-06T10:02:06+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=b060fb70cdca155027f92222ea0d989f8e9bf21f'/>
<id>urn:sha1:b060fb70cdca155027f92222ea0d989f8e9bf21f</id>
<content type='text'>
</content>
</entry>
<entry>
<title>pki: ipsec: T3642: Migrate IPSec to use PKI configuration</title>
<updated>2021-06-29T19:26:44+00:00</updated>
<author>
<name>sarthurdev</name>
<email>965089+sarthurdev@users.noreply.github.com</email>
</author>
<published>2021-06-29T09:06:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=f5a8a9cdfe52c331177c8bc7b8fb84fc08d4f60a'/>
<id>urn:sha1:f5a8a9cdfe52c331177c8bc7b8fb84fc08d4f60a</id>
<content type='text'>
</content>
</entry>
<entry>
<title>pki: T3642: New PKI config and management</title>
<updated>2021-06-29T13:13:34+00:00</updated>
<author>
<name>sarthurdev</name>
<email>965089+sarthurdev@users.noreply.github.com</email>
</author>
<published>2021-06-17T16:08:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=6f66e71e4622c54058b8689d4be730905d69fe22'/>
<id>urn:sha1:6f66e71e4622c54058b8689d4be730905d69fe22</id>
<content type='text'>
</content>
</entry>
</feed>
